IN THE CLAIMS : 

Please add new claims 53-55 as follows. 

1. (Previously Presented) A method, comprising: 

determining, in a first network, an address associated with a called party of a 
second network; 

determining based on said address if said called party is in a trusted network; and 
controlling communication between the called party and a calling party of the first 
network based on if said called party is in the trusted network, the communication 
comprising at least one message for the called party, wherein if the called party is not in 
the trusted network, the controlling comprises modifying the at least one message. 

2. (Previously Presented) The method as claimed in claim 1, wherein the 
determining in the first network comprises determining the address contained in a 
message for said called party. 

3. (Previously Presented) The method as claimed in claim 2, wherein the 
determining in the first network comprises determining the address contained in the 
message comprises a packet form. 
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4. (Previously Presented) The method as claimed in claim 1, wherein the 
determining if the called party is in a trusted network comprises checking if the address is 
contained in a database of trusted networks. 

5. (Previously Presented) The method as claimed in claim 4, wherein the 
determining if the called party is in the trusted network comprises checking if the address 
is contained in said database in said first network. 

6. (Previously Presented) The method as claimed in claim 4, wherein the 
determining if the called party is in the trusted network comprises checking if the address 
is contained in the database provided in a call session control function or a security 
gateway. 

7. (Previously Presented) The method as claimed in claim 4, wherein the 
determining if the called party is in the trusted network comprises checking if the address 
is contained in said database comprises domain names associated with the trusted 
networks and internet protocol addresses of the trusted networks. 

8. (Previously Presented) The method as claimed in claim 1, wherein said 
determining, in the first network, the address comprises determining if the address 
contains a domain name. 
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9. (Previously Presented) The method as claimed in claim 8, wherein if a 
determination is made that the address does not contain the domain name, the 
determining, in the first network, the address comprises sending a request for the domain 
name. 

10. (Previously Presented) The method as claimed in claim 9, wherein the 
determining, in the first network, the address comprises sending said request to a domain 
name server. 

11. (Previously Presented) The method as claimed in claim 8, wherein if a 
determination is made that the address does not contain the domain name, the 
determining, in the first network, the address comprises assuming that the called party is 
in an untrusted network. 

12. (Previously Presented) The method as claimed in claim 1, wherein if the 
called party is not in the trusted network, the controlling comprises discarding at least one 
message for the called party. 

13. (Cancelled) 
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14. (Previously Presented) The method as claimed in claim 1, wherein the 
controlling comprises modifying said at least one message for the called party by 
removing identity information relating to said calling party. 

15. (Previously Presented) The method as claimed in claim 14, wherein the 
controlling comprises removing said identity information comprising a p-asserted- 
identity header. 

16. (Previously Presented) The method as claimed in claim 1, further comprising: 
operating said first network and a second network in accordance with session 

initiation protocol. 

17. (Previously Presented) The method as claimed in claim 1 5 wherein the 
determining if the called party is in the trusted network comprises determining if a 
connection from a calling network to a called network is secured. 

18. (Previously Presented) The method as claimed in claim 17, wherein the 
determining if the called party is in the trusted network is performed in a gateway of the 
calling network. 
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19. (Previously Presented) The method as claimed in claim 18, wherein the 
determining if the called party is in the trusted network comprises determining if the 
connection between the gateway of the calling network and a gateway of the called 
network comprises a secure connection. 

20. (Previously Presented) A system, comprising: 

a first determiner configured to determine an address associated with a called party 
located in a second network; 

a second determiner configured to determine based on said address if said called 
party is in a trusted network; and 

a controller configured to control communication between the called party and a 
calling party, located in a first network, based on if said called party is in the trusted 
network, the communication comprising at least one message for the called party, 
wherein if the called party is not in the trusted network, the at least one message for the 
called party is modified. 

21. (Previously Presented) An apparatus, comprising: 

a first determiner configured to determine an address associated with a called party 
located in another network; 

a second determiner configured to determine, based on said address, if said called 
party is in a trusted network; and 
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a controller configured to control communication between the called party and a 
calling party, located in a network where the apparatus is located, based on if said called 
party is in the trusted network, the communication comprising at least one message for 
the called party, wherein if the called party is not in the trusted network, the at least one 
message for the called party is modified. 

22. (Previously Presented) A method, comprising: 

determining, in a first network, if there is a secure connection with a second 
network; and 

modifying a message from a calling party of the first network to a called party of 
the second network if a determination is made that there is no secure connection with said 
second network. 

23. (Previously Presented) The method as claimed in claim 22, wherein said 
determining is performed in a gateway. 

24. (Previously Presented) The method as claimed in claim 23, wherein the 
determining is performed in said gateway comprising a security gateway. 

25. (Cancelled) 
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26. (Previously Presented) An apparatus, comprising: 

first determining means for determining an address associated with a called party 
located in another network; 

second determining means for determining, based on said address, if said called 
party is in a trusted network; and 

control means for controlling communication between the called party and a 
calling party based on if said called party, located in a network where the apparatus is 
located, is in the trusted network, the communication comprising at least one message for 
the called party, wherein if the called party is not in the trusted network, the at least one 
message for the called party is modified. 

27. (Previously Presented) An apparatus, comprising: 

a determiner configured to determine if there is a secure connection with another 
network; and 

a modifier configured to modify a message from a calling party of a network 
where the apparatus is located to a called party of the other network if a determination is 
made that there is no secure connection with said another network. 

28. (Previously Presented) An apparatus, comprising: 

determining means for determining if there is a secure connection with another 
network; and 
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modifying means for modifying a message from a calling party of a network 
where the apparatus is located to a called party of the another network if a determination 
is made that there is no secure connection with said another network. 

29. (Previously Presented) A method, comprising: 

determining, in a gateway in a first network, if there is a secure connection with a 
second network; and 

discarding a message from a calling party in a first network to a called party in a 
second network, if a determination is made that there is no secure connection with said 
second network. 

30. (Previously Presented) An apparatus, comprising: 

a determiner configured to determine, in a gateway, if there is a secure connection 
with another network; and 

a discarder configured to discard a message from a calling party of a network 
where the apparatus is located to a called party of the another network if a determination 
is made that there is no secure connection with said another network. 

31. (Previously Presented) An apparatus, comprising: 

determining means for determining, in a gateway, if there is a secure connection 
with another network; and 
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discarding means for discarding a message from a calling party of a network 
where the apparatus is located to a called party of the another network if a determination 
is made that there is no secure connection with said another network. 

32. (Previously Presented) The apparatus as claimed in claim 21, wherein the 
first determiner is further configured to determine the address contained in a message for 
said called party. 

33. (Previously Presented) The apparatus as claimed in claim 32, wherein the 
message comprises a packet form. 

34. (Previously Presented) The apparatus as claimed in claim 21, wherein the 
second determiner is further configured to check if the address is contained in a database 
of trusted networks. 

35. (Previously Presented) The apparatus as claimed in claim 34, wherein the 
second determiner is further configured to check if the address is contained in said 
database in said network where the apparatus is located. 

36. (Previously Presented) The apparatus as claimed in claim 34, wherein the 
database is provided in a call session control function or a security gateway. 
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37. (Previously Presented) The apparatus as claimed in claim 34, wherein said 
database comprises domain names associated with the trusted networks and internet 
protocol addresses of the trusted networks. 

38. (Previously Presented) The apparatus as claimed in claim 21, wherein the first 
determiner is further configured to determine if the address contains a domain name. 

39. (Previously Presented) The apparatus as claimed in claim 38, wherein if a 
determination is made that the address does not contain the domain name, the first 
determiner is further configured to send a request for the domain name. 

40. (Previously Presented) The apparatus as claimed in claim 39, wherein the first 
determiner is further configured to send said request to a domain name server. 

41. (Previously Presented) The apparatus as claimed in claim 38, wherein if a 
determination is made that the address does not contain the domain name, the first 
determiner is further configured to assume that the called party is in an untrusted 
network. 
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42. (Previously Presented) The apparatus as claimed in claim 21, wherein if the 
called party is not in the trusted network, the controller is further configured to discard at 
least one message for the called party. 

43. (Previously Presented) The apparatus as claimed in claim 21, wherein the 
controller is further configured to modify said at least one message for the called party by 
removing identity information relating to said calling party. 

44. (Previously Presented) The apparatus as claimed in claim 43, wherein the 
controller is further configured to remove said identity information comprising a p- 
asserted-identity header. 

45. (Previously Presented) The apparatus as claimed in claim 21, wherein the 
second determiner is further configured to determine if a connection from a calling 
network to a called network is secured. 

46. (Previously Presented) The apparatus as claimed in claim 45, further 
comprising a gateway of the calling network. 

47. (Previously Presented) The apparatus as claimed in claim 45, wherein the 
gateway of the called network comprises a secure connection. 
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48. (Previously Presented) The apparatus as claimed in claim 27, further 
comprising a gateway. 

49. (Previously Presented) The apparatus as claimed in claim 48, further 
comprising a security gateway. 

50. (Previously Presented) A computer program, embodied on a computer- 
readable medium, configured to control a processor to implement a method, the method 
comprising: 

determining, in a first network, an address associated with a called party of a 
second network; 

determining based on said address if said called party is in a trusted network; and 
controlling communication between the called party and a calling party of the first 
network based on if said called party is in the trusted network, the communication 
comprising at least one message for the called party, wherein if the called party is not in 
the trusted network, the controlling comprises modifying the at least one message. 

51. (Previously Presented) A computer program, embodied on a computer- 
readable medium, configured to control a processor to implement a method, the method 
comprising: 
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determining, in a first network, if there is a secure connection with a second 
network; and 

modifying a message from a calling party of the first network to a called party of 
the second network if a determination is made that there is no secure connection with said 
second network. 

52. (Previously Presented) A computer program, embodied on a computer- 
readable medium, configured to control a processor to implement a method, the method 
comprising: 

determining, in a gateway in a first network, if there is a secure connection with a 
second network; and 

discarding a message from a calling party in a first network to a called party in a 
second network, if a determination is made that there is no secure connection with said 
second network. 

53. (New) A method comprising: 

determining at a call session control function in an internet protocol multimedia 
subsystem network a trust relation with a called party in another network; and 

controlling communication of a message to the called based on the determination, 
wherein if the called party is not trusted the call session control function removes identity 
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information relating to the calling party from the message, and if the called party is 
trusted said identity information is retained. 

54. (New) A call session control function configured to: 

determine at a call session control function in an internet protocol multimedia 
subsystem network a trust relation with a called party in another network; and 

control communication of a message to the called based on the determination, 
wherein if the called party is not trusted the call session control function removes identity 
information relating to the calling party from the message, and if the called party is 
trusted said identity information is retained. 

55. (New) A computer program, embodied on a computer- readable medium, 
configured to control a processor to implement a method, the method comprising: 

determining at a call session control function in an internet protocol multimedia 
subsystem network a trust relation with a called party in another network; and 

controlling communication of a message to the called based on the determination, 
wherein if the called party is not trusted the call session control function removes identity 
information relating to the calling party from the message, and if the called party is 
trusted said identity information is retained. 
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